Crypto-agility
Can a customer change algorithms later without re-architecting — the question every regulator is converging on?
Requirements, evidence source, and references
This page is the citable form of this dimension — a finding elsewhere can link straight to the bar it was judged against.
Crypto-agility
6 requirementsCan a customer change algorithms later without re-architecting — the question every regulator is converging on?
Algorithms are selectable through configuration rather than compiled in.
More than one algorithm family is supported for the same function, so a break in one is survivable.
Lattice and hash-based signatures both available, rather than a single lattice bet.
For KEMs, whether anything other than ML-KEM is offered.
- NIST post-quantum programme — additional algorithms (HQC, FN-DSA)search-corroboratedHQC was selected as an additional KEM and FN-DSA (FALCON) remains pending a final standard. Draft/final status changes; verify against the programme page before scoring a roadmap claim.
A documented path exists for replacing an algorithm after deployment, including what happens to data already protected.
Hybrid and classical-only modes can both be expressed, since jurisdictions differ on which is required.
- ANSSI views on the Post-Quantum Cryptography transition (2023 follow-up)confirmed2026-08-12France's position. Notably requires hybridisation where PQ protection is relevant.
- BSI TR-02102-1 — Cryptographic Mechanisms: Recommendations and Key Lengthsconfirmed2026-08-12Version 2026-01, dated 23 Jan 2026. Germany's recommendation set.
Cryptographic inventory or bill-of-materials output is available in a machine-readable form.
- CycloneDX — Cryptography Bill of Materials (CBOM)search-corroboratedThe interchange format Arena treats as satisfying a machine-readable inventory requirement.
- EU Cyber Resilience Act — Regulation (EU) 2024/2847search-corroboratedCited for the software-bill-of-materials and update-path obligations that make crypto-agility a procurement question rather than an engineering preference. Primary text not read here.
Algorithm changes are deliverable as a firmware update to devices already in the field.
HSM
- ANSSI views on the Post-Quantum Cryptography transition (2023 follow-up)confirmed2026-08-12France's position. Notably requires hybridisation where PQ protection is relevant.
- BSI TR-02102-1 — Cryptographic Mechanisms: Recommendations and Key Lengthsconfirmed2026-08-12Version 2026-01, dated 23 Jan 2026. Germany's recommendation set.
- EU Cyber Resilience Act — Regulation (EU) 2024/2847search-corroboratedCited for the software-bill-of-materials and update-path obligations that make crypto-agility a procurement question rather than an engineering preference. Primary text not read here.